The Indiana Consumer Data Protection Act (CDPA) took effect on January 1, 2026, and the Indiana Attorney Generalis now enforcing it through consumer complaints and proactive investigations. The law regulates how coveredbusinesses collect, use, disclose, store, and…
Posts by Category: Data Protection & Privacy
Connecticut Data Privacy Act Updates Go into Effect This Year
Connecticut’s legislature amended the Connecticut Data Privacy Act (CTDPA) through Senate Bill 1295, with mostchanges taking effect July 2026. The revisions broaden the law’s scope by lowering applicability thresholds, expandingsensitive data definitions (such as…
The Fix Is In: New Jersey Tweaks Its Privacy Law
New Jersey recently amended its comprehensive state privacy law, adopting changes similar to other state privacyupdates. The revisions, which took effect upon the governor’s signature, adjust definitions and exemptions in the law.Notably, the updates expand the types…
New Year, New Privacy Requirements
The U.S. state privacy landscape expanded in 2026 with new comprehensive data privacy laws in Indiana, Kentucky,and Rhode Island that grant consumers rights over personal data and require opt-in consent for sensitive information.In California, updated CCPA regulations…
Governor Newsom Announces First-In-The-Nation Privacy Tool Allowing Californians to Block the Sale of Their Data
California Governor Gavin Newsom and the California Privacy Protection Agency launched the Delete Request andOpt-out Platform (DROP), a first-of-its-kind privacy tool that lets California residents send a single request to registereddata brokers to delete their…
Why Data Privacy Impact Assessments Must Be a Backbone of any Effective Privacy Program
Privacy impact assessments (PIAs in the U.S., DPIAs under the EU GDPR) are essential tools for effective privacyprograms. They help organizations identify, assess, and mitigate privacy risks before data processing begins andsupport regulatory compliance. Growing U.S….
Norton Rose Fulbright’s 21st Annual Litigation Trends Survey Reveals Increased Data Privacy Risk Amid an Evolving Regulatory Landscape
A new survey shows U.S. corporate counsel face growing litigation risks, especially in data privacy, with 38% oforganizations reporting increased exposure. Industry hotspots include technology, consumer markets and retail. Fortypercent of survey respondents…
AI Fuels Surge in Data Privacy Investments and Redefines Governance
Cisco’s 2026 Data and Privacy Benchmark Study finds that AI adoption is driving major increases in data privacyinvestment, with 90% of organizations expanding privacy programs and 93% planning further spending to supportresponsible AI. Robust privacy and governance…
New Consumer Privacy Requirements Under the Indiana Consumer Data Protection Act are Here
The Indiana Consumer Data Protection Act (CDPA) took effect on January 1, 2026, imposing new privacy rights andobligations for businesses handling Indiana residents’ personal information. Consumers can access, correct, delete,and obtain their data, and opt out of data…
Kentucky AG Files Lawsuit Against AI Chatbot, Including Claim it Violated New Data Privacy Law
Kentucky’s Attorney General filed a lawsuit on January 8, 2026, against an AI chatbot company, alleging violations ofthe Kentucky Consumer Data Protection Act, consumer protection law, and data breach law just days after the privacylaw took effect. The complaint…


